A question about ARP request?

Does a device refer to its ARP table to send ARP reply when it get ARP request?

Sent from Cisco Technical Support Android App

Hello ,

ARP is the address resolution protocol for IP

Before you can send an IP packet, you need to built a frame destination ethernet address,If you don't know what the destination MAC address is, you use ARP to get it

You broadcast a packet at layer 2 asking who has a certain IP, and what MAC address it belongs to

The owner of the IP (if present) sends back a unicast packet to you with the answer (this means only you get the result of that arp query)You broadcast a packet at layer 2 asking who has a certain IP, and what MAC address it belongs to The owner of the IP (if present) sends back a unicast packet to you with the answer (this means only you get the result of that arp query)

A question about ARP request?

I understand what you explained. However, I am wondering if ARP does not refer to its ARP tables added by ARP request when sending ARP reply.

Sent from Cisco Technical Support Android App

Hello,

I hope the below explanation would answers your query

The ARP table is maintained dynamically. There are two ways that a device can gather MAC addresses. One way is to monitor the traffic that occurs on the local network segment. As a node receives frames from the media, it can record the source IP and MAC address as a mapping in the ARP table. As frames are transmitted on the network, the device populates the ARP table with address pairs.

Another way a device can get an address pair is to broadcast an ARP request. ARP sends a Layer 2 broadcast to all devices on the Ethernet LAN. The frame contains an ARP request packet with the IP address of the destination host. The node receiving the frame that identifies the IP address as its own responds by sending an ARP reply packet back to the sender as a unicast frame. This response is then used to make a new entry in the ARP table.

Re:A question about ARP request?

"The ARP table is maintained dynamically. There are two ways that a device can gather MAC addresses. One way is to monitor the traffic that occurs on the local network segment. As a node receives frames from the media, it can record the source IP and MAC address as a mapping in the ARP table. As frames are transmitted on the network, the device populates the ARP table with address pairs. "

#Gentle Correction:

No device learns IP and Mac Binding from the flow through ARP traffic. You always have send a ARP request to learn/build a new/expired ARP enry.

A question about ARP request?

Akshay Balaganur wrote:

"The ARP table is maintained dynamically. There are two ways that a device can gather MAC addresses. One way is to monitor the traffic that occurs on the local network segment. As a node receives frames from the media, it can record the source IP and MAC address as a mapping in the ARP table. As frames are transmitted on the network, the device populates the ARP table with address pairs. "

#Gentle Correction:

No device learns IP and Mac Binding from the flow through ARP traffic. You always have send a ARP request to learn/build a new/expired ARP enry.

Re:A question about ARP request?

Hi Ganesh,

Hope you are doing well.

You have mentioned that : "

As a node receives frames from the media, it can record the source IP and MAC address as a mapping in the ARP table. As frames are transmitted on the network, the device populates the ARP table with address pairs. "

Hence my doubt , what will it record if the device that is transmitting does not have an ip address and is requesting one via dhcp ?

Re:A question about ARP request?

However, actually I wannted to know that when ARP request/reply packet is encapsulated, how it happen and what is reffered to.

For IP packet, ARP table is reffered to look up the IP packet's destination MAC address to encapsulate the IP packet into Ethernet frame.

I know ARP is a protocol used for resolution of network layer addresses into link layer addresses, a critical function in multiple-access networks, but I am just wondering if ARP request/reply itself also refer its ARP table as ARP looks protocal for Later 3, network layer.

Say, there are Host A, Host B and SW1 on the same local network, and let me explain ARP process untill the Host B sends ARP reply to Host A.

Host A

1. Host A ping Host B

2. Ping process creates an ICMP Echo Request and IP packet is made by the Echo Request.

3. Destination IP of the IP packet is in the same subnet, and is a unicast IP packet.

4. ARP process on the Host A looks up the IP packet's destination MAC address from its ARP table to encapsulate the IP packet into Ethernet frame, but it is not in the ARP table. So the ARP process try to send ARP request after buffering the IP packet.

5. ARP process creates ARP requet.

6. The host A encapsulate the ARP request packet into Ethernet frame with FFFF.FFFF.FFFF for its destination MAC address.

7. The Host A sends out the Ethernet frame .

SW1

8. The SW1 recieves the ethernet frame.

9. The frame's source MAC address does not exist in the SW1's MAC table, so the SW1 adds the MAC address to its MAC table.

10. The SW1 sends out the frame to all ports in the same VLAN except the receiving port as the frame's MAC address is FFFF.FFFF.FFFF.

Re:A question about ARP request?

Hi Casinamul,

Between 5 and 6, 15 and 16, nothing will happen. The ARP table is referred when I don't have the L2 address [MAC address] while sending out a packet. For the ARP packet, the source MAC is available and the destination MAC is all F's. Hence, the PC will not look into the ARP table.

In point 13, the host B will not add the IP/MAC into it's own table while replying to the ARP request. The Host B has to ARP for Host A to get the IP/MAC in the ARP table.

Re:A question about ARP request?

From a system's (Unix based) point of view, between 5 and 6 or between 15 and 16 , the system will make use of arp modules or networking modules so as to reply with the configured ( static or dhcp) ip address / interface hardware address combination. I am not sure about the exact module used by Redhat but some research can lead you to the module which doesn't use the local ARP table BTW. I think the module uses information contained in the interface configuration files.

Enterprise Switching Business Unit is glad to announce Beta release 16.12.2 for all Catalyst 9200/9300/9400/9500/9600 and Catalyst 3650/3850 Platforms. This release is made available to allow users to test, evaluate and share fee...
view more

Purpose of the document
This document describes the general recommendations or best practices when designing and deploying the Cisco SD-Access technology. The document assumes that the reader has a general overview of Cisco's SD-Access for Distributed C...
view more

Do you currently have hands-on networking experience? If you do, we'd love to hear from you!
Your feedback will be reviewed and analyzed by our team to directly influence a networking management and monitoring product.
Take the 20-min or les...
view more